lazy session-undo, in order to be able to read sessions without spawing
the whole app framework